Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/peQXZljVycjXahMLHOgebWKzO6c.roa
File: peQXZljVycjXahMLHOgebWKzO6c.roa (raw, json)
Hash identifier: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=
Subject key identifier: A5:E4:17:66:58:D5:C9:C8:D7:6A:13:0B:1C:E8:1E:6D:62:B3:3B:A7
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479DB6B21EDC2679A200BEF6624F72
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/peQXZljVycjXahMLHOgebWKzO6c.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58325
IP address blocks: 93.118.40.0/22 maxlen: 24
94.177.17.0/24 maxlen: 24
2a01:4020:40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9d:b6:b2:1e:dc:26:79:a2:00:be:f6:62:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5e4176658d5c9c8d76a130b1ce81e6d62b33ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:7e:16:78:02:17:ce:fc:b3:43:2c:09:44:
88:d8:48:8c:47:9f:9d:a4:86:55:04:92:78:99:fb:
21:e0:4e:dc:e3:1a:0a:79:d0:ad:e9:dd:a0:ef:14:
09:92:f8:10:22:80:53:15:5e:52:6e:3c:a4:bb:3d:
6c:25:08:2c:c0:14:a9:89:53:d6:f4:69:8e:a3:91:
36:1b:b9:6f:c8:08:8e:9e:1c:7e:07:bc:6f:f7:cb:
5f:10:be:66:cb:0d:71:a3:d2:52:e4:92:b2:eb:4d:
dc:f6:5f:5b:c5:5e:2e:82:6a:99:14:f6:2e:b1:79:
36:68:89:c9:20:76:b5:32:a0:c8:69:af:74:83:11:
b2:4d:a9:ed:c7:c9:0b:3c:d9:e4:0d:e4:18:ff:ed:
92:86:15:39:d3:ef:50:3d:92:29:ea:18:af:73:d7:
27:b5:9e:10:b3:78:6f:cb:d5:94:45:f6:16:b4:ec:
df:79:f9:65:b9:1f:01:2f:91:d0:18:cc:fc:26:ad:
3a:b5:e3:42:bb:2b:d1:0f:82:51:e8:cf:24:6a:02:
49:f3:c0:44:e7:48:aa:dc:e8:7d:a0:c2:dd:b2:99:
be:6d:8d:92:bf:15:08:98:4f:1a:c7:bf:49:ec:26:
5e:f6:8a:fa:34:5d:22:b9:d6:cf:c0:8f:4b:30:0e:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E4:17:66:58:D5:C9:C8:D7:6A:13:0B:1C:E8:1E:6D:62:B3:3B:A7
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/peQXZljVycjXahMLHOgebWKzO6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.118.40.0/22
94.177.17.0/24
IPv6:
2a01:4020:40::/44
Signature Algorithm: sha256WithRSAEncryption
e4:0b:cb:13:01:7d:f4:17:97:4b:89:bb:e4:2c:b4:f4:15:cb:
8a:88:c3:90:27:cd:60:35:8f:e5:8d:d9:d4:3d:6f:0e:49:4b:
5d:6c:f4:d2:14:b2:c0:41:f8:13:15:7a:01:3c:2e:b2:73:9c:
2d:77:42:35:55:ce:b6:10:f1:71:ce:af:29:98:1b:fa:a8:b3:
04:73:8b:88:a8:8c:bb:5c:f8:e4:8a:fe:77:87:dc:eb:c4:f3:
89:ca:45:9a:b8:10:f8:af:79:de:0f:73:55:4b:b8:b8:57:d4:
96:c8:f8:80:69:f5:35:0e:ba:c9:5a:9b:7b:8b:b6:52:39:8b:
e9:dc:d3:cc:75:b2:86:69:f8:b0:1b:26:44:be:c1:e4:08:de:
8f:89:23:ae:d0:9c:1b:84:0b:96:5e:4b:c9:c7:9e:fd:81:3b:
4c:16:7f:06:30:a3:f5:8e:a9:d7:71:18:d4:8c:eb:a5:d8:3f:
9c:4a:8b:d4:3a:a8:11:d0:df:f4:dc:1e:c6:87:81:3c:93:a5:
b2:7a:21:81:95:a4:68:28:35:8f:2e:d8:82:51:b4:a8:65:0f:
5c:29:12:b3:88:38:90:a3:b5:e4:6f:c8:10:d4:0d:31:8e:0e:
c3:50:79:80:b2:ea:1b:f1:1a:98:62:99:cb:ad:92:a7:13:99:
a4:50:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:48:16 2025 by rpki-client